Private IP VPN CIDR Block(transit gateway) and Customer Gateway on the same Subnet

0

Can someone Please explain why does the Customer Gateway IP Address have to be assigned from the CIDR Block in the Transit GW. I think this is a typo in the document.

https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-site-to-site-vpn-private-ip-vpns/

In Step 4: The IP address to configure in the Customer gateway should be from the Transit Gateway CIDR block we defined in Step 2, and the BGP ASN the one from your on-premises environment.

3개 답변
1

Hi Tarun,

You are correct. Please note information provided in the blogs is subject to change depending on when it was published so its best to cross check with the actual documentation of the service.

I suggest to refer below note from the documentation: https://docs.aws.amazon.com/vpn/latest/s2svpn/private-ip-dx.html

Enter image description here

If the Answer is helpful, kindly Mark the answer as 'accepted' answer, so it will help others in similar situation, Thank you.

profile pictureAWS
전문가
답변함 2년 전
profile picture
전문가
검토됨 5달 전
profile picture
지원 엔지니어
검토됨 2년 전
0

A response would be highly appreciated, This is a new feature from AWS and any insight on the documentation would be highly appreciated. I have posted various questions regarding private VPN over the direct connect but I am yet to hear from someone who has successfully implemented this feature.

Tarun
답변함 2년 전
0

Hello!

We updated the blog post in October 2022 removing that typo: the customer gateway IP to configure does not need to be inside the range of the Transit Gateway CIDR block configure. What you need to make sure, as pointed out by Tushar, is that this IP does not overlap with the TGW CIDR block (as well as any CIDR block in AWS or your on-premises location).

AWS
Pablo_S
답변함 일 년 전
profile picture
전문가
검토됨 5달 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠